Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's the best one, look no further.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
523b19a7318876c525e7bebffdf992a623dec980833c9373fdcc7fa92521fb68
Signature (Ed25519, base64)
J0YRvHtcfFwfqefLwVFH1cQjn/2vyLugy2BqYGr6XhDprElfZNqz5iEU9xCmh3vUSF/zkZk6GQLfE7TCzZUFBQ==
Merkle root
42ee8ba4b974d737f78b7f168d0af8ea0510697ac4ab4c6db44b5522bd195660
Merkle path
["5238c10be0ed952561f7a0e8ab0c3b34966359f468c496de196206dc40a73b64","9aa5d0c5a7e44461724e88657491659c335705021463b06049c197caaef80f90","4ad5fba465f7b73ca883dbf9f0709c1414823f60f347a0b00cadb8408bb0175e","4e5c2a47025f7e5f2f9a722b0383a7d5ea7378a62a7fa7cef7f27b87dd0577d5","abf960c38feb88b071319ce5d6f9483100788f30329f6c12672e2f85b3c3ff16","58e7fa72584044c22c53e7d0cee92b7ac88b994d1ce2b23d71b7e62e5c5f1037","bf12fc9704437f268e7dc619cdac6ee66dca0f542a5877150f5c4b18db0cbaa0","a2900cf101ae788320b252182d8df9a057cd15260b98740405483f52009f4663","1a5c06d568a003453744c0180252a81391864dfda58a84036a2388b377a41cef","427bac49d0189583f71a9387d0b1f39bb9ec25dba293077576a5e27943c6241e","51fa1aea486aecbc2afc406a6d8388482b59959a4c3d1de185360cb81c8f2715","30d3d9f9bc254eb6bfc8c827b53feae0023a247bc9141fdcd1e9902234b39648","49dd732b74591111793e90f822c8febb6b4e9dba2f427a61f4d9f7035d4c82e9","c77ac7da32c6d4db47aeb73e606322601c1bed1566533de53bf56d1599928d0e"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3272785693 · entry 108e9186e8c5677ad5db…
Expected log hash
3b93391ec0595ab5c0ff73f2540eb1322f56c3c1302e6789c57b97c74423deaf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792118508353","kind":"published-quote","locale":"en","page":"brand:roboform","quote":"It's the best one, look no further.","rating":5,"review_date":"2026-10-13","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id331787573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (42ee8ba4b974…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.